View the Global Response History

Note

The Global Response screen is not generally available. To gain access to this feature, contact your Customer Success Manager.

To help you understand and analyze the remediation actions taken across your environment, you can use the Global Response screen. This screen displays all remediation actions taken for all MalOps and all machines in your Cybereason environment.

Note

Presently, Global Response screen only displays response actions taken by Cybereason XDR.

To help you filter the list of actions, you can then filter the list by:

• MalOp ID

• Indicator/Process target for the remediation action

• Target Identity/Machine on which the remediation action was performed

For each remediation action in the table, the table displays the following:

Column	Description
Action name	The name of the remediation action.
Response integration	The platform that performed the remediation actions. If the action was performed on an endpoint machine connected to your Cybereason platform, the integration is Cybereason EDR.
Request time	The time that the user performed the action in the Cybereason platform.
Execution time	The time the action was performed on the target. This time may be significantly later than the Request time if the target was offline or unreachable when the action was performed in the Cybereason platform.
Status	The status of the action execution. If there was an issue with performing the action, this column displays details on the error. Hover over the Failed value to learn more about the error.
Indicator	The target Element for the action, such as process name.
Target identity	The target machine or user associated with the action.
Related Malop	The MalOp associated with this remediation action. You can click on the MalOp ID to open the Malop Details screen for that MalOp.
Committed by	The Cybereason user that performed the remediation action.